Not good enough. 5 years of security updates is a min for me on a project like this where you will never find anyone else with an official OS build. 10 years should be the standard, but that's a lot to hope for from software or hardware.

[–] ree@lemmy.ml 1 points 2 years ago (2 children)

It should be illegal to sell device connected to the internet without long term security update.

[–] kevincox@lemmy.ml 1 points 2 years ago

I don't know about illegal but they should be forced to prominently advertise their security update lifetime. Sort of like energy labels are put onto household appliances or nutrition labels are put onto food.

[–] dreiwert@szmer.info 1 points 2 years ago

This might create a bias towards large vendors with huge human resources to throw at maintenance. But it should be illegal to sell devices and hinder third parties to fix bugs and develop security upgrades, for example through closed software platforms, drivers and interfaces.